Security and compliance.

Your customers' data

Where it lives. Databases for custom systems are hosted on Supabase (managed PostgreSQL), in the region agreed per project and documented in the proposal. Public sites are served from Netlify. No customer data is copied to personal devices or loose spreadsheets.

Encryption. Everything travels over HTTPS/TLS. At rest, the provider's storage is encrypted. Keys for third-party services (AI models, messaging) live in server-side environment variables, never in the browser or the code.

Access by role. Each user sees only what their role needs, and the rule is enforced in the database (row-level security), not just on the screen. SCENTRO's own access is limited to the agreed support and can be revoked at any time: the system is yours, with full documentation and credentials.

AI. Models are used through commercial APIs with your business's rules; under the provider's commercial terms, data sent is not used to train models. Public demo features carry a daily cap so nobody can abuse them.

Text and WhatsApp messaging

Business-initiated messages go out only to people who opted in, use templates approved by the platform where required, and honor a one-word opt-out every time. Conversations are kept in the customer's record inside your system, not on personal phones. We design the flows to fit the consent rules that apply to your business; your own counsel confirms the specifics for your state and industry.

Privacy

You are the owner of your customers' personal data; SCENTRO acts as a processor within the scope of the project and builds so that you can meet your obligations: a visible privacy notice, limited purposes, access and deletion requests you can actually fulfill.

This site's own privacy notice, covering what you share with us through the form or by text, is in full at Privacy notice.

Mexico-specific compliance for cross-border clients

If your business sells into Mexico or operates there, we handle the parts that are specific to Mexico so you do not have to learn them: CFDI 4.0 electronic invoicing through a government-authorized provider, Mexican data-privacy law (LFPDPPP) requirements, and, for regulated sectors, anti-money-laundering awareness. The founder is certified in Mexico's PLD/FT/FPADM framework.